CVE-2022-4346: Updraftplus All-In-One Security

Medium severity, CVSS 5.3. EPSS: 0.7% chance of exploitation in the next 30 days.

The All-In-One Security (AIOS) WordPress plugin before 5.1.3 leaked settings of the plugin publicly, including the used email address.

Affected products

• Updraftplus All-In-One Security: before 5.1.3 (fixed in 5.1.3)

Published 2023-01-23. Last modified 2026-06-17.